Topic: mod_security 2.0.0-rc2 for Apache2.2 available

[Steffen]

If you want to play with the latest and the greatest features on Apache
2.2.x, I build mod_security 2.0.0-rc2 binary for Apache 2.2.x.

Download http://www.apachelounge.com/download

Be aware:

!! ModSecurity 2 is not backward compatible with ModSecurity 1.x.
!! Use the latest version in the 1.9.x branch if you need to update an existing installation.

News features are:

IP address tracking and scoring.
Transaction scoring.
Real-time Block Lists (RBL) support.
Improvements to the response buffering code.
New engine feature: functions.
New engine feature: transaction variables.
New engine feature: custom persistent variable collections.
New engine feature: regex backrefences support.
Inclusion of Apache error log messages in audit log.
Ability to inspect Apache error log messages.
Application session tracking and scoring.
User account tracking and scoring.
Honeypot proxying based on IP address, session, or user account.
New engine feature: per-rule normalisation options.
Rule engine rewrite splits rule processing into multiple phases: request headers, request body, response headers, response body, logging.
XML support, which allows XML to be parsed, validated (using a DTD or a Schema), and data extracted using XPath expressions.
Many other improvements throughout


Steffen